Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa
File: NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa (raw, json)
Hash identifier: Q9rJ7JMLzl3yeyyyQzAthCxv9Ht4FLjQxLbgJopVlJo=
Subject key identifier: 37:35:FE:CE:9D:D5:A9:D1:22:AB:99:38:C8:D5:9B:73:D7:E3:71:9F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0ABB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa
Signing time: Wed 31 Jul 2024 01:28:56 +0000
ROA not before: Wed 31 Jul 2024 01:28:56 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2747 (0xabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 31 01:28:56 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=3735FECE9DD5A9D122AB9938C8D59B73D7E3719F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:47:06:29:5a:e4:d7:80:ba:c8:4e:eb:e2:
76:32:b9:0d:ee:7f:6a:43:49:a7:85:27:93:6d:33:
28:9f:3e:57:c4:d7:9e:ca:e7:89:25:fc:6c:32:04:
f8:32:98:15:01:26:29:1c:2b:c4:b7:88:00:7b:5b:
fd:3b:f4:48:2b:c3:ac:d5:bc:9d:7c:f5:0a:bc:00:
e3:cd:f6:9f:d9:36:0c:4e:75:56:c7:fc:ca:7f:f0:
a3:28:30:11:60:21:7c:f6:18:05:a1:25:34:99:3c:
6f:f8:db:3c:68:8b:95:59:fd:57:df:87:b7:93:6e:
98:e9:28:48:33:6a:34:e7:03:ac:9e:c8:82:34:6d:
9a:96:89:35:14:cb:f5:e5:bf:8f:10:a2:a2:95:91:
ce:aa:38:a6:1f:5f:8c:7f:72:20:b6:90:85:15:44:
55:6f:1d:2b:88:05:95:b9:b6:10:06:c1:12:93:be:
fc:dc:1b:e6:a5:ff:ed:23:d9:4c:f8:58:2f:10:4d:
22:e0:09:43:a5:41:fa:32:10:77:a3:6e:15:fe:cc:
ec:65:ce:56:48:d1:f8:18:35:01:db:54:cd:2f:1d:
94:2f:5c:b1:0e:e2:d4:d3:65:e6:95:ca:15:5a:db:
77:4d:14:5b:9b:f5:74:29:91:20:07:e9:d4:5a:9c:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:35:FE:CE:9D:D5:A9:D1:22:AB:99:38:C8:D5:9B:73:D7:E3:71:9F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzX-zp3VqdEiq5k4yNWbc9fjcZ8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.16.0/20
Signature Algorithm: sha256WithRSAEncryption
70:ab:bc:3e:60:d4:aa:d9:3b:e2:90:7a:94:b2:0b:ed:36:81:
7f:16:85:e0:2f:89:7c:c4:a2:41:38:d7:05:b5:9f:39:70:6d:
27:89:b0:7e:1e:ed:ec:65:18:d8:5e:f1:d2:bc:7c:b6:8d:3b:
cb:56:f2:c2:9a:f0:c5:ae:f1:30:25:ed:95:42:42:82:fb:9b:
39:ec:66:bf:9f:0b:13:0c:aa:2b:dc:d9:64:a0:5a:9e:a6:f9:
3a:af:95:75:93:3b:cd:50:a7:88:f3:e9:6e:99:53:70:92:c3:
f4:30:77:9c:3c:d8:6d:9e:cc:d2:49:96:5c:9f:1d:35:4e:aa:
fa:1c:87:95:2f:13:55:0e:cf:9f:aa:42:05:aa:1a:6b:56:d0:
78:72:55:54:5c:ff:61:d8:5f:65:1e:6a:56:70:e1:73:65:cb:
29:9a:0e:92:8a:ea:e9:53:f7:db:d2:7d:e8:bd:6e:5d:54:fe:
98:e0:52:b7:6a:c0:4b:12:51:95:9d:0a:96:b9:ee:de:0a:3b:
f8:ea:35:8b:c8:bb:6f:1d:73:aa:7a:dd:1b:a9:d1:f8:5f:cd:
6e:59:37:42:a0:3d:f1:0c:d1:a7:c0:72:5c:95:fa:ef:fb:46:
37:13:a1:9d:bf:a9:21:58:ec:b8:73:81:83:ea:60:54:ef:92:
f9:24:ae:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:50:33 2025 by rpki-client